Site changes, new feature, etc.
The SQL injection issues, at least all that I could find, are fixed. The first alert was on March 18th. That went out via: Twitter account status page a notice on the top of each page of the website See also FreshSource code fixes. Short version everything we know about is fixed we saw no […]
SQL injection issues fixed Read More »
In this post, I’ll talk about how someone was able to use SQL injection to spin up the database server to 100% utilization. I found the queries in the logs, duplicated the situation on dev, patched the code, and updated the website. See also SQL inejection issues fixed. In this post: FreeBSD 13.1 PostgreSQL server
FreshSource code fixes Read More »
The commits.php page has a long history dating back to 2006 in GitHub and before that in another repo. Soon, it is going away. The justification is in issue 337: it’s not used much, and it’s not doing as it should (loading the last 100 commits). In the early days, the front page showed only
/commits.php is going away Read More »
Some new graphs were put on the beta site last night. They use a combination of jQuery and Flot to generate the graphs. All the backend code is php (but is quite ugly and small). The real meat of the important code is in the javascript. I’ve written an explanation of how the code works
New (Fancy?) Graphs! Read More »
FreshPorts can now search all commits, not just /ports. Looking for commits in /src? Now you can. Click on Include /src tree. Enjoy.
Searching all commits Read More »
After quite some time with little on the outside but lots of busy action on the inside, the BSD Certification Group‘s BSD Associate (BSDA) certification is now available! The BSD Associate certification marks the entry level for professional, community-based BSD certification, and work will continue to offer a certification for BSD Professionals (BSDP) next.
BSD Certification Group’s BSDA certification goes gold Read More »
The previous post was based on a question from Martin Wilke, who was looking for a vuxml entry against phpMyAdmin. We eventually found it. It had the wrong dates but it was found. Martin corrected the problem with a followup commit. This incident prompted me to make a couple of changes to FreshPorts with respect
List the vulnerabilities for this port Read More »
The repo is now online: See http://cvs.freshports.org/cgi-bin/cvsweb.cgi/. You can also get to a cvs server at the same hostname.
FreshPorts – cvs online Read More »
I am just back from OSCON. While there, I attempted to incorporate some CSS patches into FreshPorts…. I failed. It is time to Open Source FreshPorts. It uses PHP (website), Perl (message processing), and Python (cache). It’ll take me a while to get the infrastructure into place. I have servers suitable for this purpose. I
Open Sourcing FreshPorts Read More »
Some of you may be noticing HTML in the daily outgoing messages. I apologise for that. You must have seen the various notices that appear at the top of each FreshPorts webpage. At present, they look like this: Absolute BSD – $25 shipped – order yours now I’m looking for work. I’m a software developer/sysadmin.
Stripping HTML from announcements Read More »